高手请进！关于Web Service 安全性问题

Question

http://www.pagediy.com/list.asp?boardid=12

Answer 1

这个方法不好吧，除非每一个WebMothed都要验证

Answer 2

有三种方式.
一是使用session,
二是使用windows 集成认证.
三是使用证书.

Answer 3

扩展类,继承
SoapExtensionAttribute<webServices>
<protocols>
<remove name="HttpPost" />
<remove name="HttpGet" />
</protocols>
<soapExtensionTypes>
<add type="SoapExtensionLibrary.UsernamePasswordSoapExtension,SoapExtensionLibrary" priority="1" group="0" />
</soapExtensionTypes>
<soapExtensionReflectorTypes>
<add type="SoapExtensionLibrary.UsernamePasswordSoapExtensionReflector,SoapExtensionLibrary" />
</soapExtensionReflectorTypes>
</webServices>

Answer 4

做一个UsernamePasswordSoapExtension的类，继承
SoapExtension，在WebMothed用：[WebMethod]
[SoapDocumentMethod(Use=SoapBindingUse.Literal)]
[UsernamePasswordSoapExtension]
public int Add( int x, int y )
{
return x + y;
}